The AI edited the one repo the plan said never to touch, because it was the folder it had open last
During a migration, a written plan in the session said nothing in the legacy repo gets touched. The plan was re-shown in full mid-session. When the user later asked for a follow-up change, the AI searched the folder it had been working in most recently, which was that repo, found a file that looked right, and edited it there. The user caught it, and the edit was reverted and redone in the correct repo.
How it works
- Plan states the legacy repo is not to be touched
- Plan re-shown in full mid-session
- User asks for a follow-up change
- The AI searches its most recent folder, the fenced repo
- Edits a matching file there
- User catches it
- Edit reverted and redone in the right repo
Why it’s worth knowing
The rule was not buried. It had been put back in front of the agent in full, in the same session, shortly before the edit.
Where it’s from
Summarized from a public post on github.com. See the original ↗